Onboarding new maven snapshots publishing to s3 (alerting) (#1949)

peterzhuamazon · web-flow · commit 42c0878c0418 · 2025-10-18T00:35:43.000-04:00
Signed-off-by: Peter Zhu &lt;zhujiaxi@amazon.com&gt;
diff --git a/.github/workflows/maven-publish.yml b/.github/workflows/maven-publish.yml
@@ -35,8 +35,13 @@ jobs:
           export-env: true
         env:
           OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
-          SONATYPE_USERNAME: op://opensearch-infra-secrets/maven-central-portal-credentials/username
-          SONATYPE_PASSWORD: op://opensearch-infra-secrets/maven-central-portal-credentials/password
+          MAVEN_SNAPSHOTS_S3_REPO: op://opensearch-infra-secrets/maven-snapshots-s3/repo
+          MAVEN_SNAPSHOTS_S3_ROLE: op://opensearch-infra-secrets/maven-snapshots-s3/role
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v5
+        with:
+          role-to-assume: ${{ env.MAVEN_SNAPSHOTS_S3_ROLE }}
+          aws-region: us-east-1
       - name: publish snapshots to maven
         run: |
           ./gradlew publishShadowPublicationToSnapshotsRepository
diff --git a/alerting/build.gradle b/alerting/build.gradle
@@ -83,10 +83,11 @@ publishing {
     repositories {
         maven {
             name = "Snapshots"
-            url = "https://central.sonatype.com/repository/maven-snapshots/"
-            credentials {
-                username System.getenv("SONATYPE_USERNAME")
-                password System.getenv("SONATYPE_PASSWORD")
+            url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")
+            credentials(AwsCredentials) {
+                accessKey = System.getenv("AWS_ACCESS_KEY_ID")
+                secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")
+                sessionToken = System.getenv("AWS_SESSION_TOKEN")
             }
         }
     }
diff --git a/build-tools/repositories.gradle b/build-tools/repositories.gradle
@@ -5,6 +5,6 @@
 
 repositories {
     mavenLocal()
-    maven { url "https://central.sonatype.com/repository/maven-snapshots/" }
+    maven { url "https://ci.opensearch.org/ci/dbc/snapshots/maven/" }
     mavenCentral()
 }
diff --git a/build.gradle b/build.gradle
@@ -29,7 +29,7 @@ buildscript {
     repositories {
         mavenLocal()
         maven { 
-            url "https://central.sonatype.com/repository/maven-snapshots/"
+            url "https://ci.opensearch.org/ci/dbc/snapshots/maven/"
             mavenContent {
                 snapshotsOnly()
             }
diff --git a/sample-remote-monitor-plugin/build.gradle b/sample-remote-monitor-plugin/build.gradle
@@ -30,7 +30,7 @@ ext {
 repositories {
     mavenLocal()
     mavenCentral()
-    maven { url "https://central.sonatype.com/repository/maven-snapshots/" }
+    maven { url "https://ci.opensearch.org/ci/dbc/snapshots/maven/" }
 }
 
 configurations {
diff --git a/spi/build.gradle b/spi/build.gradle
@@ -44,10 +44,11 @@ publishing {
         }
         maven {
             name = "Snapshots"
-            url = "https://central.sonatype.com/repository/maven-snapshots/"
-            credentials {
-                username System.getenv("SONATYPE_USERNAME")
-                password System.getenv("SONATYPE_PASSWORD")
+            url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")
+            credentials(AwsCredentials) {
+                accessKey = System.getenv("AWS_ACCESS_KEY_ID")
+                secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")
+                sessionToken = System.getenv("AWS_SESSION_TOKEN")
             }
         }
     }

Original file line number	Diff line number	Diff line change
`@@ -83,10 +83,11 @@ publishing {`
`83`	`83`	`repositories {`
`84`	`84`	`maven {`
`85`	`85`	`name = "Snapshots"`
`86`		`- url = "https://central.sonatype.com/repository/maven-snapshots/"`
`87`		`- credentials {`
`88`		`- username System.getenv("SONATYPE_USERNAME")`
`89`		`- password System.getenv("SONATYPE_PASSWORD")`
	`86`	`+ url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")`
	`87`	`+ credentials(AwsCredentials) {`
	`88`	`+ accessKey = System.getenv("AWS_ACCESS_KEY_ID")`
	`89`	`+ secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")`
	`90`	`+ sessionToken = System.getenv("AWS_SESSION_TOKEN")`
`90`	`91`	`}`
`91`	`92`	`}`
`92`	`93`	`}`
Original file line number	Diff line number	Diff line change
`@@ -5,6 +5,6 @@`
`5`	`5`
`6`	`6`	`repositories {`
`7`	`7`	`mavenLocal()`
`8`		`- maven { url "https://central.sonatype.com/repository/maven-snapshots/" }`
	`8`	`+ maven { url "https://ci.opensearch.org/ci/dbc/snapshots/maven/" }`
`9`	`9`	`mavenCentral()`
`10`	`10`	`}`
Original file line number	Diff line number	Diff line change
`@@ -29,7 +29,7 @@ buildscript {`
`29`	`29`	`repositories {`
`30`	`30`	`mavenLocal()`
`31`	`31`	`maven {`
`32`		`- url "https://central.sonatype.com/repository/maven-snapshots/"`
	`32`	`+ url "https://ci.opensearch.org/ci/dbc/snapshots/maven/"`
`33`	`33`	`mavenContent {`
`34`	`34`	`snapshotsOnly()`
`35`	`35`	`}`
Original file line number	Diff line number	Diff line change
`@@ -30,7 +30,7 @@ ext {`
`30`	`30`	`repositories {`
`31`	`31`	`mavenLocal()`
`32`	`32`	`mavenCentral()`
`33`		`- maven { url "https://central.sonatype.com/repository/maven-snapshots/" }`
	`33`	`+ maven { url "https://ci.opensearch.org/ci/dbc/snapshots/maven/" }`
`34`	`34`	`}`
`35`	`35`
`36`	`36`	`configurations {`
Original file line number	Diff line number	Diff line change
`@@ -44,10 +44,11 @@ publishing {`
`44`	`44`	`}`
`45`	`45`	`maven {`
`46`	`46`	`name = "Snapshots"`
`47`		`- url = "https://central.sonatype.com/repository/maven-snapshots/"`
`48`		`- credentials {`
`49`		`- username System.getenv("SONATYPE_USERNAME")`
`50`		`- password System.getenv("SONATYPE_PASSWORD")`
	`47`	`+ url = System.getenv("MAVEN_SNAPSHOTS_S3_REPO")`
	`48`	`+ credentials(AwsCredentials) {`
	`49`	`+ accessKey = System.getenv("AWS_ACCESS_KEY_ID")`
	`50`	`+ secretKey = System.getenv("AWS_SECRET_ACCESS_KEY")`
	`51`	`+ sessionToken = System.getenv("AWS_SESSION_TOKEN")`
`51`	`52`	`}`
`52`	`53`	`}`
`53`	`54`	`}`